Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File:                     LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier:          OEGyfY04aFBCvgTH4iVx+YJhVYjrIhhdaXhr04P5nHA=
Subject key identifier:   15:1A:EC:5A:F7:9F:FD:F9:93:CD:AC:9B:B6:05:1A:1F:42:22:D0:E6
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer:       /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial:       019FABD10216756682A99DD6D0A08021A80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number:          09C6
Signing time:             Wed 29 Jul 2026 03:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:29 +0000
Files and hashes:         1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
                          2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: WaREWvJ5uH668fJmoZLygq7lye+uNdnS6L80FGTij4U=)
                          3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:02:16:75:66:82:a9:9d:d6:d0:a0:80:21:a8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
        Validity
            Not Before: Jul 29 03:00:29 2026 GMT
            Not After : Jul 30 03:00:29 2026 GMT
        Subject: CN=151aec5af79ffdf993cdac9bb6051a1f4222d0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:1b:c6:77:77:a6:3d:56:8d:9b:34:0f:46:
                    2a:f2:9b:f7:0d:08:1b:ac:23:06:05:16:15:8c:ca:
                    b6:16:93:ff:9a:6a:28:5e:ed:f0:a9:e0:52:e2:59:
                    67:ec:98:fd:8c:ad:5b:d0:cb:54:a5:0b:35:32:8d:
                    ff:a6:6c:1a:a3:9d:82:a4:aa:cd:3a:6b:c1:e9:84:
                    cf:cd:14:13:bf:80:a8:88:79:2b:8a:3d:c3:1c:79:
                    60:11:26:a6:63:6b:29:09:4a:a5:a4:7c:3f:64:2c:
                    f9:39:32:d2:54:69:e1:88:a0:fe:f4:ca:a5:4b:e6:
                    77:24:fa:76:d3:3b:96:46:3a:91:3d:17:db:b6:ad:
                    b5:0e:46:0d:59:a4:78:52:92:61:33:f2:3f:4c:bf:
                    a1:02:a0:36:0e:50:1d:ef:01:b2:da:7c:13:52:07:
                    ab:0f:24:17:eb:6d:40:ff:2a:d1:c3:35:7b:d8:ae:
                    7b:bd:cf:9e:05:43:20:4d:e2:14:d8:7b:3f:13:88:
                    51:e6:9d:69:a9:18:e4:43:96:7c:8c:de:aa:c4:8f:
                    a4:2d:ca:83:22:bc:d8:3e:b6:cd:78:97:a4:05:c1:
                    b5:b0:99:30:e1:7d:c1:5c:90:d1:af:8a:c8:db:84:
                    06:1c:ca:ea:f1:a6:cb:6d:0d:d7:8d:07:01:71:83:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:EC:5A:F7:9F:FD:F9:93:CD:AC:9B:B6:05:1A:1F:42:22:D0:E6
            X509v3 Authority Key Identifier:
                keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:dd:e2:14:4e:ca:8e:2b:2a:a6:9b:42:00:7d:fb:21:f0:
         0d:16:ff:19:1d:43:79:32:93:4a:2e:65:7b:86:5c:5d:e5:fb:
         11:9d:39:c4:c8:1e:00:7d:af:03:f2:a6:ae:d9:66:d7:8a:49:
         bd:1e:01:e6:49:56:26:78:19:24:32:2b:8c:82:70:cc:ef:08:
         fe:0a:c1:82:a6:ca:bf:c1:bb:13:3f:f0:78:c6:62:48:4c:8a:
         60:6d:b5:89:8a:a1:b7:7d:b7:6d:94:b5:d8:f5:91:a7:79:39:
         d8:d2:8f:20:0c:ff:7b:ac:53:1d:24:07:49:ca:04:5e:c3:62:
         59:dc:ae:48:9f:1c:b9:e1:e6:4f:5e:d4:0a:05:f5:fc:9e:db:
         d4:0b:ea:2e:b5:11:62:7d:2e:d0:13:d8:a4:3f:8a:1a:c0:27:
         13:b0:19:0d:ba:09:0b:cc:18:d4:ea:36:8a:6e:a6:f7:aa:cc:
         03:10:50:0c:21:0d:e1:8d:e0:81:e9:5f:31:5b:db:06:f8:a6:
         e2:d0:b6:9c:04:dc:f8:f4:14:fa:99:1c:85:8e:ef:e9:4e:6e:
         dc:37:dd:14:2e:f5:62:88:27:af:1f:a7:9d:ae:09:70:39:c2:
         44:e1:81:19:49:5c:41:16:b8:81:ce:8e:08:a8:13:2b:64:fc:
         1c:ee:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:20 2026 by rpki-client